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(54) A method of providing a service in a switched telecommunications system and a message 
interceptor suitable for use in such method 



(57) A method of providing a service, such as local 
number portability (LNP). in a switched telecommunica- 
tions system, in which a message interceptor is dis- 
posed in a signalling link of an SS7 signalling network 
of the system. The message interceptor detects calls for 
which service implementation is required, by comparing 
the content of intercepted circuit-related SS7 messages 
with service trigger conditions, such as message type 
(checked directly by the interceptor) and message con- 
tent (e.g. called number, which the interceptor checks 



by reference to a database). When service implemen- 
tation is detected as being required, the message inter- 
ceptor may implement at least part of the required serv- 
ice by modifying parameters of the intercepted mes- 
sage; alternatively, the interceptor may re-direct the 
message to a service control f unctbn for service imple- 
mentation. The invention enables services to be imple- 
mented without Incurring inefficient use of core network 
resources, and without expensive and time-consuming 
modification of switch and SCP control software. 
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Description 

Technicai Fieid 

The present invention relates to a n^ethod of provid- 
ing a service in a switched telecommunications system 
and a message interceptor suitable for use in this meth- 
od. In particular, but not exclusively, the present inven- 
tion relates to a service providing method and message 
interceptor for use in a switched telecommunications 
system having a signalling network operating substan- 
tially in accordance with Signalling System No.7, wheth- 
er as specified by the CCITT, ANSI. ETSI (for GSM), 
Bellcore or similar body, such a network being herein 
referred to as an SS7 network. The CCITT Signalling 
System Number 7 is specified in Recommendations Q. 
700-Q.716 CCITT Volume VI - Fasccle VI.7. Geneva 
1 989, ISBN 92-61-03511-6 which is herein incorporated 
by reference. 

Background of the Invention 

Signalling in Modern Telecommunications Systems 

In modem switched telecommunicatk)n systems (in 
particular, modern PSTNs) it has become connmon 
practice to provide two related but separate network in- 
frastructures: a bearer or transmission network for car- 
rying end-user voice and data traffic, and a signalling 
network for controlling the setup and release of bearer 
channels through the bearer network in accordance with 
control signals transferred through the signalling net- 
work. In practice such signalling networks comprise 
high-speed computers interconnected by signalling 
links; computer programs control the computers to pro- 
vide a set of operational and signalling functions in ac- 
cordance with a standardized protocol. One example of 
such a signalling protocol is the afore-mentioned Sig- 
nalling System No. 7 (SS7) which Is being extensively 
deployed for control of telephone and other data trans- 
mission networks. An SS7 network basically comprises 
various types of signalling points, namely, signalling end 
points (SEPs) and signalling transfer points (STPs) in- 
terconnected by signalling links, the SEPs being asso- 
ciated for example with respective service switching 
points (SSPs) of the transmission network, and with 
service control points (SCPs). 

Referring to Figure 1 , an SS7 network 10 is shown 
inter-communicating three signalling end points consti- 
tuted by two service switching points SSPs 1 1 (between 
which extend speech circuits 12 of a transmission net- 
work not further illustrated) and a service control point 
SCP 13. The SCP serves to implement particular serv- 
ices (sometimes called IN, or Intelligent Network, serv- 
ices) in response to service requests received from an 
SSR such a service request being generated by an SSP 
upon certain trigger conditions being met in the SSP in 
respect of a call that it is handling. A typical service may 



involve the translation of the dialled number (called party 
number) to a different number, the SCP returning this 
latter number to the SSP to enable the latter to complete 
call setup. 

5 The SS7 network 10 Includes two pairs 14 of sig- 
nalling transfer points STPs, and a plurality of link sets 
18 interconnecting the SSPs. SCP and STPs into a re- 
dundant network. Each signalling link set 18 is made up 
of one or more indivklual signalling links, the number of 

'to si^aliing links in a link set being chosen to provide ap- 
propriate capacity for the level of signalling traffic ex- 
pected. The redundancy provided in respect of the STPs 
and links is to ensure that the failure of a single compo- 
nent of the network core does not cause the whole net- 

is work to fail. 

It should be noted that an SS7 network will typically 
comprise more STP pairs, SSPs and SCPs than illus- 
trated. Sen^ice control f unctbnality, as well as t>eing pro- 
vkded in an SCP, can be provided in an Adjunct directly 

20 connected to an SSP. 

Messages traversing the links of the network may 
be any of a large number of different types, depending 
on the nature of the call to which the message relates 
and the function specified by the message. 

2S 

The 887 Architecture 

In order to facilitate an understanding of the present 
invention, a brief review will be given of the layered 
30 structure of the SS7 architecture and of the messages 
passed over the links of the network 10 to implement 
the SS7 architecture. 

Figure 2 illustrates the SS7 architecture. Levels 1 
to 3 (referenced 21. 22, 23) form the message transfer 
35 part (MTP) 24. The MTP 24 is responsible for transfer- 
ring signalling infomriation between signalling points in 
messages. Level 4 (not referenced as a whole) compris- 
es circuit-related user parts, namely ISDN User Part (IS- 
UP) 26 and Telephone User Part (TUP) 27. These user 
40 parts define the meaning of the messages transferred 
by the MTP 24 and provide functionality to the users of 
SS7 (block 29). The user parts 26 and 27 are specific 
to particular types of circuit-related applications as indi- 
cated by their names. In fact, the ISUP is the most im- 
45 portant user part, the TUP being a subset of ISUP and 
having been largely replaced by the latter. Most inter- 
exchange signalling, such as between SSPs 11 in Fig- 
ure 1 , uses ISUP messages. 

SS7 level 4 also includes functional elements defin- 
50 ing a general protocol for non-circuit-related informa- 
tion, such as operations, maintenance and administra- 
tion information or network database information (pro- 
vkied, for example, from an SCP 13). The main func- 
tional element in this Level 4 protocol is the Transaction 
55 Capabilities (TC) 30 which sits on top of a Signailing- 
Connection-Control Part (SCCP) 31 and beneath a TC 
Users element 32. The SCCP 31 actually forms part of 
the transfer mechanism for non-circurt-related applica- 
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tions, combining with MTP 24 to provide a transfer 
mechanism meeting the Open Systems Interconnection 
(OSI) Layer 3/4 boundary requirements. Users of the 
SCCP/TC stack include the INAP (Intelligent Network 
Application Part) 32 and MAP (Mobile Application Part) 
33. With reference to Figure 1 , messages passed be- 
tween an SSP 11 (Figure 1) and SOP 13 will be INAP 
messages using SCCP/TC. Some inter-exchange sig- 
nalling may also use SCCP/TC messages where, for ex- 
ample, the purpose of the signalling Is servk:e related 
rather than circuit related. ISUP may also use the SCCP 
for certain messages. 

Considering the MTP 24 in a little more detail, Level 
1 (reference 21) defines the physical, electrical and 
functional characteristics of the transmission path for 
signalling. MTP Level 2 (reference 22) defines the func- 
tions and procedures for the transfer of signalling mes- 
sages over a link between two directly -connected sig- 
nalling points. MTP Level 3 (reference 23) provides 
functions for the reliable transfer of signalling informa- 
tion from one signalling end point to another. Thus, Level 
3 is responsible for those functions that are appropriate 
to a number of signalling links, these being separable 
into signalling-message handling functions and signal- 
ling-network management functions. 

When considering the passing of messages over a 
single linK it is the combination of Levels 1 and 2 that 
provides for the reliable transfer of signalling informa- 
tion. The Level 2 functions provide a framework in which 
the information is transferred and performs error-detec- 
tion and error-correction processes; the Level 2 func- 
tions are carried out afresh on a link-by-link basis. At 
Level 2, information is seen as being transferred be- 
tween signalling points in messages known as "signal 
units*. 

The general form of a signal unit 40 is shown in Fig- 
ure 3. As can be seen, a field 41 carrying message/data 
is encapsulated in a Level 2 framework comprising the 
following fields: a flag field; a backward sequence 
number field (BSN); a backward-indicator bit (BIB); a 
forward sequence number field (FSN); a forward-indi- 
cator bit (FIB); a length indicator field (LI); a spare field 
(SP); a check field; and a tenminating flag field. The bit 
lengths of these fields are also indicated in Figure 3. The 
FSN, FIB, BSN, BIB and check fields provide error cor- 
rection functionality at link level in a manner well under- 
stood by persons skilled in the art. 

There are three types of signalling unit: 

MSU - the Message Signal Unit - MSUs carry all 
service/applicatk>n data sent on the SS7 network. 
The amount of data per MSU is limited to 273 octets 
maximum. 

- LSSU - the Link Status Signal Unit - LSSUs carry 
information relating to the status of the link and are 
therefore concerned with Level 2 functions. Nonmal- 
ly. LSSUs are only seen during the initial alignment 
procedure when a link is brought into service but 



are used at other times, for example, to stop the flow 
of signal units when processors are busy. 
• FISU - the Flll-ln Signal Unit - When no MSUs or 
LSSUs are to be sent, a signalling point continually 
5 sends FISUs. FISUs carry basic Level 2 Information 
only, for example, the acknowledgement of the last 
MSU (fieki 41 Is empty). 

The length indicator (LI) within each message indicates 

10 the signal unit type as follows: LI = 0 mesins FISU; LI = 
1 or 2 means LSSU; and U = 3 or more means MSU. 

Figure 3 further illustrates at 42 the basic format of 
an MSU; as can be seen, it comprises a service infor- 
mation octet SIO of 8 bits and a slgr^tling information 

IS field SIF of 8/7 bits, where n is a positive integer. The 
SIO field includes a Servce Indicator subfield that de- 
fines the user part or equivalent appropriate to the mes- 
sage. The SIF contains the information being trans- 
ferred and will generally include a routing label 43 com- 

20 prising a 14-bit destination point code (DPC) indicating 
the destination signalling end point, a 14-bit originating 
point code indicating the originating signalling end point, 
and a 4-blt signalling link selectkxi field for specifying a 
particular link in cases where two signalling points are 

2S linked by a multiple-link link set. The MTP 24 is not 
aware of the contents of the SIF other than the routing 
label. 

As an example of the information that may be bome 
by an MSU, where a call is being set up. the first ISUP 

30 message to be sent out by the calling-party exchange 
is an initial-address message (lAM) which will contain 
the required address (e.g. the digits dialled by the calling 
customer) and it results in a seizure of a circuit by each 
exchange along the route to the called-party exchange. 

3S Figure 4 illustrates the general format of an ISUP mes- 
sage. Thus, an ISUP message comprises, in addition to 
the routing label 43, a circutt-kientification code (CIC) 
44 Indicating the number of the speech circuit between 
two exchanges to which the message refers, a message 

40 type code 45 (set to 00000001 for an lAM), and a 
number of parameters organised Into three parts 46, 47, 
48 according to type. Mandatory parameters of fixed 
length are placed In the mandatory fixed part 46 (for an 
I AM, these are the Nature of Connection parameter, the 

^ FoHA^ard-call Indicators, the Calling Party Category pa- 
rameter, and the Transmission Medium Requirement 
parameter). Mandatory parameters of variable length 
are placed in the variable mandatory part 47 (for an I AM, 
there Is only one such parameter, namely the Calling- 

^ Party Number). Optional parameters are placed in the 
optional part 48 (for an lAM, these are the Calling-Party 
Number and User-to-User information). 

Number Portability Service 

ss 

The general process of service provision in a mod- 
ern PSTN has already been outlined above, this process 
involving the generation by an SSP of a service request 
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that is then passed to service control functionality (gen- 
erally either in the form of an SCP or an Adjunct). To 
facilitate an understanding of the context of the present 
invention, a rrK>re specific example of a known sen/ice 
will next be described. 

A service that is currently attracting much attention 
is number portability. The reason for this interest is that 
Local Number Portability (LNP) has become a regulato- 
ry requirement in the USA. LNP is intended to allow sub- 
scribers to move between LECs (Local Exchange Car- 
riers) whilst retaining their existing telephone numbers, 
within a rating area. 

AT&T has proposed an LNP solution using a Loca- 
tion Routing Number (LRN). This solution relies on 
switched-based triggers to reference service control 
functionality in standard manner The solution requires 
modification to the ISUP I AM message to add in a Ge- 
neric Address Parameter (GAP) and a Forward Call In- 
dicator (FCI), The general operation of the LRN number 
portability proposal will become clear from the following 
description given with reference to Figure 5. 

In Figure 5. party A is connected to switch E01 of 
carrier CI ('EO* standing, of course, for "End Office"), 
Party B was previously connected to switch E02 of car- 
rier C1 but has now ported (moved) to carrier C2 and is 
currently connected to switch E03 of carrier C2. Before 
B ported to carrier C2, B's number was ■708-444-1234', 
the '708-444* part of this number indicating the switch; 
when A dialled B. the switch E01 simply routed the call 
direct to switch E02 based on the "444' part of the di- 
alled number. After B has ported, B is connected to 
switch EOS which is identified by '708-555'. The objec- 
tive of number portability is to enable A to continue to 
dial B using the number '708-444-1234' (it being appre- 
ciated that the '708' part of the number will not need to 
be dialled by A). The operations that follow the dialling 
of '444-1234" by A will now be described, these opera- 
tions being indicated by bracketed reference numbers 
in Figure 5: 

(1 ) E01 examines the dialled digits and determines 
that the dialled number (DN) relates to switch E02 
which is a donor EO (that is, some subscribers have 
been ported from this EO). Of course, carrying out 
this determination requires that every switch must 
perform an internal lookup to determine whether the 
DN is destined for a donor EO. 

(2) , (3) An LNP SCP database lookup is now per- 
formed to determine if the Called Party Number 
CdPN is ported (typically, this query will be routed 
via an STP as illustrated). 

(4), (5) The SCP returns an LRN. For non-ported 
customers the LRN will be the same as the original 
CdPN. However, if the customer has ported the LRN 
will be different from the original CdPN. 
(6), (7) Assuming the DN is for a ported customer, 
then E01 must route the call based on the LRN rout- 
ing tables. The chosen route wilt generally be via an 



Access Tandem as the call is destined for a different 
carrier. Once a route is selected, switch E01 pre- 
pares an lAM with the folbwing substitutions: 
CdPN=LRN. GAP=:DN and FCI=LNP Query Done. 
s The I AM Is then transmitted. 

(8) When the lAM arrives at the recipient switch 
E03, a check is performed on the FCI arxi GAP. This 
check indicates that the I AM relates to aported cus- 
tomer and so E03 must substitute CdPN=GAP and 
then perform a lockup on the CdPN to establish the 
physical connection to the CPE (Customer Premis- 
es Equipment). 

As described, the above method relies on the orig- 
inating switch (here E01) querying a LRN database be- 
fore initiating every call. Considering the small number 
of customers who are expected to port their numbers, 
this approach (the "originating trigger" method) results 
in highly inefficient use of valuable network iresources. 
As an alternative, the originating switch can be arranged 
to attempt to terminate each call to the switch indicated 
in the dialled number DN; most calls will complete suc- 
cessfully and only in the event that a call fails because 
of a call attempt to a ported DN will a LRN database 
lockup be made. This second approach is referred to as 
the "call dropback* method as it involves a failed call 
being dropped or released back to the originating 
switch. There are two main versions of the call dropback 
method which differ in where the LRN lockup is done. 
In the first version, the donor switch (i.e. the switch 
where the ported number originally resided) does the 
lookup and passes back the LRN to the originating 
switch in an enhanced release message. In the second 
version, it is the originating switch that does the tockup 
after receiving a release message from the donor switch 
indicating that the DN has ported. Whilst either version 
of the call dropback method is relatively efficient in its 
use of resources, a user calling a ported customer ex- 
periences an increase in post-dial delay because two 
calls must be initiated before one is completed. 

It will be appreciated that the above-described LNP 
methods require modification to the existing switch soft- 
ware as well as to the SCPs. Such modifications are of- 
ten extremely expensive and time consuming. The 
same shortcomings are apparent for other new services 
it is desired to implement. 

It is an object of the present invention to provide a 
method of implementing services in a switched telecom- 
munications network that is less costly and has less ef- 
fect on existing infrastructure than the standard method 
of implementation described above. A separate object 
of the present invention is to provide a simple message 
interceptor that can be used in the method of the present 
invention to intercept inter-exchange signalling messag- 
es. 
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Summary of the Invention 

According to the present inventbn. there is provid* 
ed a method of providing a service in respect of a call 
rn a switched telecommunications system that compris- s 
as a bearer network with a plurality of switching points 
for setting up calls through the bearer network, and a 
signalling system with a plurality of links by means of 
which circuit-related control messages can be passed 
between the switching points for regulating call setup 10 
and release; saki method comprising the steps of: 

(a) - intercepting said circuit-related control mes- . 
sages, 

(b) - for each intercepted control message, access- is 
ing service trigger data to ascertain whether service 
implementation action is required in respect of the 
call associated with the control message, 

(c) - where step (b) indicates that service implemen- 
tation action is required, modifying the correspond- 20 
ing control message, and 

(d) - forwarding on the intercepted control messag- 
es over the signalling network. 

According to another aspect of the present inven- 2S 
tion, there is provided a message interceptor for inter- 
cepting and modifying messages passing over a signal- 
ling link according to a link-level protocol operated be- 
tween the link end points, said message interceptor ef- 
fecting its operation without providing a link-level termi- 30 
nation. ' 

Brief Description of the Drawings 

Methods of providing a sen/ice in a switched tele- 3S 
communications system, and a message interceptor, 
embodying the invention will now be described, by way 
of nonlimrting example, with reference to the accompa- 
nying diagrammatic drawings, in which: 

40 

Figure 1 is a diagram illustrating the main compo- 
nents of a standard SS7 signalling system; 
Figure 2 is a diagram illustrating the basic architec- 
ture of the SS7 protocol; 

Figure 3 is a diagram showing the format of an SS7 ^ 
message signalling unit (MSU); 
Figure 4 is a diagram of the signalling infomriation 
field of an ISUP MSU; 

Figure 5 is a diagram showing the operations in- 
volved in implementing the switch-based LRN so 
number portability proposal described above; 
Figure 6 is a diagram showing the operations in- 
volved in implementing number portability in a first 
embodiment of the Invention, for a customer who 
has ported out; ss 
Figure 7 is a diagram showing the operations in- 
volved in implementing number portability in a sec- 
ond embodiment of the invention, for a customer 



who has ported in; 

Figure 8 Is a diagram showing the operations in- 
volved in implementing number portability in a third 
embodiment of the invention, for a customer who 
has ported out from the same local exchange as a 

caller. 

Figure 9 is a diagram showing the operations in- 
volved in Implementing number portability in a 
fourth embodiment of the invention, for a customer 
who has ported out; 

Figure 10 is a diagram showing the operattons in- 
volved in implementing number portability in a fifth 
embodiment of the invention, using enhanced re- 
lease messages, for a customer who has ported 
out; 

Figure 11 is a diagram showing the operatkins in- 
volved in implementing automated call interceptbn, 
in a sixth embodiment of the invention; 
Figure 12 is a diagram showing the operations in- 
volved in implementing automated fraudulent call 
interception, in a seventh emkKxiiment of the inven- 
tion; 

Figure 13 is a diagram showing the operational 
placement of the message interceptor; 
Figure 14 is a time diagram illustrating the delay 
Tpmsu introduced by the message interceptor; and 
Figure 15 is a block diagram showing the main 
functional units of the message interceptor. 

Best Mode lor Carrying Out the lnv<Hitlon 

Embodiments of the present invention relating to 
the provisbn of particular services will now be described 
with reference to Figures 6 to 12 of the accompanying 
drawings. All these embodiments utilise a message in- 
terceptor disposed in a signalling link of a PSTN that has 
an SS7 signalling network. The message interceptor 
serves to detect calls for which service implementation 
is required, this detection being done by comparing in- 
tercepted circuit-related signalling messages with serv- 
ice trigger conditions. These trigger conditions include 
message type which the message interceptor can gen- 
erally check directly Hself, and message content (such 
as called number) which the message interceptor may 
check by referencing a database. Once sen^ice imple- 
mentation has been detected as required, two different 
approaches are possible. According to a first approach, 
the message interceptor not only serves to detect calls 
for which service provision is required, but also effects 
at least part of the service provision by modifying pa- 
rameters of the intercepted messages. In the second 
approach, the message interceptor re-directs to a serv- 
ice control function those messages which it detects as 
calling for service implementation. 

A preferred form of message interceptor is de- 
scribed with reference to Figures 13, 14 and 15. 
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Service Implementation Examples 

The first service to be considered below is local 
number portability (LNP) effected using Locatbn Rout- 
ing Numbers. Four possible situations will be described 
with reference to Figures 6 to 9 as follows: 

Figure 6 Customer A calling Customer B who has 

ported out from carrier 1 to carrier 2; 
Figure 7 Customer A calling Customer B who has 

ported in from carrier 2 to carrier 1 ; 
Figure 8 Customer A calling Customer B who has 

ported out from the same local exchange 

as A (carrier 1 ) to carrier 2; 
Figure 9 Customer A calling Customer B who has 

ported out from carrier 1 to carrier 2. 

The embodiments of Figures 6 to B all use the aforesaid 
first approach to service provision whereas the Figure 
9 embodiment uses the second approach. It will be ap- 
preciated that the second approach could also be used 
in other situations (e.g. those corresponding to Figures 
7 and 8). 

Figure 10 illustrates a third approach according to 
the invention for providing LNP, this approach being sim- 
ilar to the call dropback method previously mentioned; 
Figure 10 relates to the same situation as Figure 6 but 
It will be appreciated that the variant method could 
equally be applied to the other situations described. 

LNP - Customer 8 Ported-Out (Figure 6) 

Party A (E01) is attempting to contact B who has 
now ported from carrier 1 (E02) to carrier 2 (E03). The 
objective is to deliver the call to party B on EOS using 
the original carrier 1 number. 

(1) E01 simply launches an 1AM to E02 based on 
the DN received from party A. A speech path is set- 
up between E01 and E02. 

(2) A message interceptor Intercepts the MSU traffic 
from the links between E01 and the STP. This is 
done on a per-link basis. For each I AM detected, an 
LNP database lookup is performed across a data 
network to determine if the Called Party Number 
(CdPN) is ported. 

(3) The database returns an LRN. For non-ported 
customers the LRN will be the same as the original 
CdPN. However, if the customer has ported the LRN 
will be different from the original CdPN. 

(4) Assuming the DN is for a ported customer the 
message Interceptor will substitute the lAM 
CdPN=LRN, GAP=DN and FCI=LNP Query Done 
and retransmit the MSU to E02. 

(5) -(8) When E02 receives the lAM it will see a 
CdPN=:LRN and attempt to complete the call via an 
Access Tandem. A speech path will be reserved 
across E01-E02-AT-E03. 



(9) When the lAM arrives at the recipient E03, a 
check is performed on the FCI and GAP. Based on 
this, E03 must substitute CdPN=GAP and perform 
a lookup on the GAP to establish the physical con- 
5 nection to the CPE. 

LNP - Customer B Ported-ln (Figure 7) 

Party A (E01) is attempting to contact B (new car- 
lo rier 1 customer) who has ported from carrier 2 (E03) to 
carrier 1 (E02). The objective is to deliver the call to 
party B on E02 using the original carrier 2 number. 

(1) Assuming that all calls to a foreign LEC (local 
IS exchange carrier) will transit through an Access 

Tandem (AT), E01 simply launches an 1AM to the 
AT based on the DN received from party A. A 
speech path is set-up between E01 and AT. 

(2) A message interceptor intercepts the MSU traffic 
20 from the links between E01 and the STP This is 

done on a per-iink basis. For intercepted lAMs, an 
LNP database lookup is performed across a data 
network to determine if the Called Party Number 
(CdPN) is ported 
2S (3) The database retums an LRN. For non-ported 
customers the LRN will be the same as the original 
CdPN. However, if the customer has ported the LRN 
will be different from the original CdPN. 

(4) Assuming the DN is for a ported customer, the 
30 message interceptor will substitute the lAM 

CdPN=LRN, GAP =DN and FCI=LNP Query Done 
and retransmit the MSU to AT. 

(5) , (6), (7) When AT receives the lAM it will see a 
CdPN=LRN and attempt to complete the call to 

3S E02. A speech path will be reserved across 
E01-AT-E02. 

(8), (9) A message interceptor intercepts the MSU 
traffic from the links between STP and E02. This is 
done on a per-link basis. The message interceptor 

^ performs a check on the FCI and GAP. Based on 
this, the message interceptor must substitute . 
CdPN=GAP and remove the GAP and FCI. The call 
will then be delivered to EQ2 for call processing and 
completion to party B via the normal translation 

^ processes. 

LNP - Customer B Ported-Out From A*s EO (Figure 8) 

Party A (E01) is attempting to contact B who has 
so ported from carrier 1 (E01 ) to carrier 2 (E03). The ob- 
jective is to deliver the call to party B on E03 using the 
original carrier 1 number. If B had not ported, the call 
between party A and B would be handled intra-switch 
and there woukJ be no external SS7 signalling for call 
55 set-up. 

The basis of the service is to detect all intra-switch 
calls to a ported number by provisioning a call forward 
number to the original subscriber number. The only ex- 
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ception is that the Numbering Plan Area (NPA) compo- 
nent of the number will have a unique assignment which 
will be reserved for intra-LATA (Local Access & Trans- 
port Area) LNP purposes. For this example, assume that 
this special NPA code is 777. 

(1 ), (2) E01 receives the DN and performs standard 
call-fonvarding to the original dialled number with a 
special NPA code of 777 preceding the DN. An I AM 
is launched to the AT which acts as a special gate- 
way for such types of call. A speech path is set-up 
between EOl and AT. 

(3), (4) A message Interceptor intercepts the MSU 
traffic from the links between STP and AT This 
would be done on a per-link basis. An LNP data- 
base lookup is now performed across a data net- 
work to determine if the Called Party Number 
(CdPN) is ported. 

(5) The database returns an LRN. For non-ported 
customers the LRN will be the same as the original 
CdPN. However, if the customer has ported the LRN 
will be different from the original CdPN. 

(6) Assuming the DN is for a ported customer, the 
message interceptor will substitute the I AM 
CdPN=LRN, GAP=DN (with the correct LATA NPA 
code) and FCI=LNP Query Done, and retransmit 
the MSU to AT 

(7) , (8) When AT receives the lAM it will see a 
CdPN=LRN and attempt to complete the call direct- 
ly to E03. A speech path will be reserved across 
E01-AT-E03. 

(9) When the lAM arrives at the recipient EOS. a 
check is performed on the FCI and GAP. Based on 
this, E03 must substitute CdPN=GAP and perform 
a lookup on the GAP to establish the physical con- 
nection to the CPE. 

LNP - Customer B Ported-Out (Figure 9) 

Figure 9 shows how the aforesaid second approach 
to service implementation can be applied to the situation 
which was dealt with in Figure 6 by using the first ap- 
proach to service implementation. In this second ap- 
proach, the message interceptor is dedicated to modi- 
fying the DPC and an adjunct is resen/ed for performing 
the LRN translations. The benefit of this approach is that 
we can re-route messages to standard IN elements for 
call processing. As will be seen, this approach requires 
the message interceptor and adjunct to access a shared 
database. 

Party A (EOl) is attempting to contact B who has 
now ported from carrier 1 (£02) to carrier 2 (E03). The 
objective is to deliver the call to party B on E03 using 
the original carrier 1 number. 

(1) EOl simply launches an I AM to E02 based on 
the DN received from party A. A speech path is set- 
up between EOl and E02. 



(2). (3) A message interceptor intercepts the MSU 
traffic from the links between EOl and the STP. This 
would be done on a per-link basis. An LNP data- 
base lookup is now performed across a data net- 

s work to determine if the Called Party Number 
(CdPN) is ported. If the DN is a ported number, a 
copy of the 1AM is stored in a shared database and 
the DPC of the lAM changed to that of the LNP ad- 
junct processor. If the DN is a non-ported number 

10 the call proceeds as normal. 

(4). (5). (6) As the original DPC of this MSU was 
corrupted by the message interceptor, the LNP ad- 
junct must access the shared database to recall the 
original DPC in order to determine the correct des- 

is tination for this MSU (i.e. E02). 

(7), (8), (9) The LNP adjunct now performs an LNP 
database lookup to perfonm the LRN translations 
lAM CdPN=LRN. GAP=DN and FCi=LNP Query 
Done. The lAM is then retransmitted to E02. 

20 (10)-(12) When E02 receives the 1AM it will see a 
CdPN=LRN and attempt to complete the call via an 
Access Tandem. A speech path will be reserved 
across E01-E02-AT-E03. 

(13) When the 1AM arrives at the recipient E03. a 
2S check is performed on the FCI and GAP. Based on 
this. E03 must substitute CdPN=::GAP and perfonm 
a lookup on the GAP to establish the physk:al con- 
nection to the CPE. 

30 LNP - Customer B Ported-Out - Release Message 
Loopback (Figure 10) 

Although the foregoing methods of providing UMP 
have the advantage of avoiding the need to update the 

35 originating switch, they suffer from the disadvantage 
that they may consume more trunk resources than strict- 
ly necessary. This is because a call to a ported number 
may first be routed to the wrong destination switch. In 
order to overcome this drawback, the message inter- 

40 ceptor can be arranged to generate a message similar 
to the enhanced release message already described in 
respect of one form of the call dropback method for LNP 
provision. More particularly, the message interceptor 
carries out a check on each received lAM to determine 

45 jf it relates to a ported number and if it does, the relevant 
LRN is returned to the originating switch in an enhanced 
released message. The mechanism used to direct the 
enhanced release message back to the originating 
switch is to swap the destination and source point codes 

so of the received lAM and forward it as an enhanced re- 
lease message so that the next signalling point encoun- 
tered by the message (generally an STP) will route the 
message back to the originating switch. This switch then 
deallocates the trunk initially allocated for the call and 

55 then tries again using the LRN returned in the enhanced 
release message as the called party number. The new 
lAM sent out by the switch has its FCI set to indicate to 
the message interceptorthat a lookup has already been 
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done on the message so the interceptor will just pass it 
on. 

The advantage of this approach as compared to the 
standard call dropback method is that it minimises the 
post-dial delay experienced by the caller before being 
connected. 

Figure 10 illustrates the looping back by the mes- 
sage interceptor of an enhanced release message for 
the same situatbn as shown in Figure 6, namely Party 
A (E01) Is attempting to contact B who has now ported 
from carrier 1 (E02) to carrier 2 (EOS). As before, the 
objective is to deliver the call to party B on EOS using 
the original carrier 1 number. 

(1) E01 starts by launching an I AM to E02 based 
on the DN received from party A A speech path is 
set-up between E01 and E02 (shown dashed In 
Figure 1 0 because it is taken down before call com- 
pletion). 

(2) A message interceptor intercepts the MSU traffic 
from the links between E01 and the STP. This is 
done on a per-link basis. For each lAM detected, 
unless the lAM already has its FCI set to Query 
Done, an LNP database lookup is performed across 
a data network to determine if the Called Party 
Number (CdPN) is ported. 

(3) The database returns an LRN. For non-ported 
customers the LRN will be the same as the original 
CdPN. However, if the customer has ported the LRN 
will be different from the original CdPN. 

(4) Assuming the DN is for a ported customer the 
message interceptor will modify the lAM to an en- 
hanced release message Including the LRN and will 
swap the source and destination point codes before 
retransmitting the MSU to the STP. 

(5) The STP foops the enhanced release message 
back to E01 which deallocates the trunk to E02. 

(6) , (7) E01 now sends out a new lAM with the 
CdPN set to the LRN received in the enhanced re- 
lease message, GAP set to DN and FCI set to Query 
Done. A speech path is reserved between E01 and 
the Access Tandem. The message interceptor on 
receiving the lAM recognises that the FCI is set to 
Query Done so it simply passes on the lAM to the 
STP 

(8), (9) The TAM Is passed via the Access Tandem 
to EOS and a speech path will be resented between 
AT and EOS. 

(10) When the I AM arrives at the recipient EOS, a 
check is performed on the FCI and GAP. Based on 
this, EOS must substitute CdPN=GAP and perform 
a lookup on the GAP to establish the physical con- 
nection to the CPE. 

Automated Call Intercept (Figure 11) 

The next service to be described provides an auto- 
matic method for intercepting call attempts from a list of 



subscribers. The proposed service will seamlessly in- 
tercept and record (via an intelligent Peripheral - IP) all 
call attempts from users held in a secure agency data- 
base. Senfice implementation involves the aforesaid 

s second approach though, of course, the first approach 
would also be possible. 

An Intelligent Peripheral platfomri with appropriate 
interfaces is used in this embodiment. The call Intercept 
feature can be activated on either the Calling Party or 

10 Called Party numbers and based on time of day (if re- 
quired). 

(1) ,(1a),(1b) A call attempt by a targeted user will 
be progressed by the EO as normal. A message in- 

is terceptor will intercept the lAM which performs a 
search of the intercept database using the CgPN or 
CdPN (etc.). If the call is NOT on the intercept list, 
the call will be routed to the CdPN in the usual way. 

(2) , (3) However, If an intercept match is found, the 
20 DPC of the I AM will be changed to route the call to 

an adjunct or Sen^ice Node (SN). The original lAM 
is stored in a shared database such that the original 
DPC can be recovered when the call must be com- 
pleted to the intended DPC (E02). 

2S (4 - 7) At the SN the CdPN will be modified to direct 
the call to an IP (which could be owned by an au- 
thorized agency) via E02. The original lAM will be 
fetched from the shared database to determine the 
DPC for completing the call. 

30 (8 - 12) As the IP will be a shared resource, It is 
likely that calls must be routed via an access tan- 
dem AT Hence, E02 will forward the call to AT and 
subsequently onto the IP. A continuous speech path 
will now be reserved between E01 -E02-AT-IP (see 

3S references 1, 9, 11 in square brackets). 

(13), (14) Having terminated the A-leg of the call, 
the IP must then establish the original CdPN to 
which the call should be completed (B-leg). This in- 
formation can be retrieved from the adjunct using 

40 either Advanced Intelligent Network (AtN) or some 
variant protocol. (Note: Some I SUP implementa- 
tions have a diverted number field which the adjunct 
could use to store the original CdPN). 
(15-18) Having determined the original CdPN. the 

4S IP will originate an I AM with CgPN set to the original 
calling party number A (Note: In case CLASS - Cus- 
tom Local Area Signalling Service - services are ac- 
tive) in order to complete the B-leg of this call. The 
lAM will be delivered to E02 based on the CdPN 

so via an access tandem. Speech paths for the B-leg 
will be allocated in the order IP-AT-E02 (see refer- 
ences 15, 17 in square brackets). 

Once the call is answered, the IP can use a 3-way 
bridge to provide a continuous speech path between A 
and B, whilst activating a voice peripheral to record the 
call. All of this would happen seamlessly. The conver- 
sation could be reviewed in real-time, or the recorded 
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message can be voice mailed to the interested party. 
Many options exist for the review and notification (i.e. 
Voice4o-Text and then E-mail, or Paging, etc.). 

Call Intercept - Fraud (Figure 12) s 

This service provides an automatic method for in- 
tercepting call attempts from a list of fraudulent sub- 
scribers. The service will seamlessly intercept call at- 
tempts to or from users held in a fraud database. The to 
infomiation in this database could be updated in real- 
time. 

An Intelligent Peripheral platform with appropriate 
interfaces is used in this embodiment. The call intercept 
feature can be activated on either the Calling Party or is 
Called Party numbers and based on time of day (if re- 
quired). 

(1) ,(1a),(1b) A call attempt Involving a fraudulent 
user will be progressed by the EO as normal. A mes- 
sage interceptor will intercept the lAM which per- 
forms a search of the fraud database using the Cg- 
PN or CdPN. If the call is NOT on the fraud list, the 
call will be routed to the CdPN in the usual way. 

(2) , (3) However, if an intercept match is found, the 2S 
DPC of the lAM will be changed to route the call to 

an adjunct or SN. The original 1AM is stored in a 
shared database such that the original DPC can be 
recovered when the call must be completed to the 
intended DPC (E02), 30 
(4 - 7) At the SN the CdPN will be modified to direct 
the call to an IP via E02. The original I AM will be 
fetched from the shared database to determine the 
original DPC for completing the call. 
(B - 12) As the IP will be a shared resource, It is 35 
likely that calls must be routed via an access tan- 
dem AT Hence, E02 will fon/vard the call to AT and 
subsequently onto the IP. A continuous speech path 
will now be reserved between E01 -E02-AT-IP (see 
references 1.9. 11 in square brackets). 40 

On receiving the 1 AM: the IP can then play an an- 
nouncement to the calling party based on the CgPN or 
CdPN. The IP can extract the original CdPN from the 
diverted address fieki. 4S 

— If the CgPN Is the fraudster the IP could play "... you 
are currently barred from using the networf^. 

— If the CdPN is that of the fraudster the I P could play 

"... you are currently calling a barred usei^. so 

The Message Interceptor 

The message interceptor can be of the general form 
described in EP-A-0 669 771 in which a signalling link ss 
is effectively split into two links by the interceptor, the 
interceptor operating independent link-level protocol en- 
gines for exchanges with the two ends of the interrupted 



link. A message interceptor of this form whilst effective, 
is relatively complicated. A simpler form of message in- 
terceptor will now be described below with reference to 
Figures 13. 14 and 15. 

Figure 13 illustrates the general disposition of a 
message interceptor 60 in one channel 61 of a bi-direc- 
tional link between an SSP and an STR this channel 61 
passing messages from the SSP to the STP. Messages 
on the channel 61 are routed through the message in- 
terceptor 60 and in effect enter a delay pipe subjecting 
them to a delay Tp^ (see Figure 14 which depicts both 
a message P flowing from SSP to STP along the chan- 
nel 61 and a return message Q flowing in the opposite 
direction on the channel 62 which does not pass through 
the interceptor 60 so there is no delay T^su ^^^^ chan- 
nel). 

. A bypass relay arrangement 65 permits the inter- 
ceptor 60 to be bypassed in fault conditions and in this 
case there will, of course, be no delay Tp^„ in messag- 
es passing along the channel 61 (see message R In Fig- 
ure 14). 

A key feature of the message interceptor is that it 
does not modify MTP Level 2 state-based protocol pro- 
cedures viz. backward error correction and flow control; 
it may, however, modify error checking and delimitation 
procedures which are stateless transfonnations. 

The act of switching the relay arrangement 65 to 
bypass the interceptor 60 in the event of failure will be 
seen as bit errors whch are corrected by level 2 back- 
ward error correctbn procedures in the STP and SSP. 
Thus the SSP and STP will generally remain in synchro- 
nism in the event of failure of the interceptor 60. 

During normal operation of the message intercep- 
tor, as messages pass through the interceptor they are 
examined by comparing their type and the values of par- 
ticular parameters with service trigger condition data to 
see if service Implementation action is required; if it is, 
then the message concerned will be modified. As al- 
ready mentbned. generally at least certain of the trigger 
condition data will be stored in a database 66 (possibly 
on an external server) though where appropriate a local 
cache memory may be provided of sufficient size to hold 
the database. 

Figure 15 is a functbnal block diagram of the mes- 
sage interceptor 60. The message interceptor compris- 
es the following units: 

Relays 65A, 65B These are the bypass (or pass- 
thru) relays for bypassing the interceptor when non-op- 
erational. The relays are controlled by a supervision unit 
71 (see below). 

Clock recovery unit 70 This unit recovers clocking 
informatk>n from the line 61 to synchronise operation of 
the units of the interceptor (in particular, units 72 and 
74) with the line 61. 

Delimitation, alignment detection and error de- 
tection (receive) unit 72 This unit serves to read in 
messages from the line 61 -in; to this end, the unit 72 
carries out the following functions: 
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- acquires MTP L2 message frames de-limited by 
flags and strips bits inserted for data transparency; 

— checks each frame meets MTP L2 criteria for frame 
length and that the CRC-16 check is correct; such 
frames are tagged as 'good*; 

- traffic which fails the above criteria is tagged as 'er- 
rored'; 

- in either case traffic is appended to a delay pipe 73 
(see below) an octet at a time. 

Delay Pipe 73 As already indicated, the intercepted 
messages are effectively passed through a delay pipe; 
In practice, this "pipe" is implemented by storing the 
messages in known memory locations and using point- 
ers to provide a delay pipe type function. 

Delimiter insert, mimic aiignment and error 
check Insert (transmit) unit 74 This unit serves to out- 
put messages from the delay pipe 73 onto the line 
61*out; to this end, the unit 74 carries out the following 
functbns: 

— delimits frames with flags; 

— inserts stuffed bits for data transparency; 

- calculates the CRC-16 check for the frame; ap- 
pends the CRC-16 check to frames tagged as 
'good*; appends the ones complement of the CRC- 
16 check to frames tagged as bad; 

— tracks the alignment of the receiver; if an event oc- 
curred which caused the receiver to enter octet 
counthg mode (long frame, abort, short frame) then 
it is replicated by the transmitter. 

Timestamping Unit 77 Message frames are times- 
tamped on receipt of the first octet, the timestamp reg- 
ister being driven by the recovered clock information 
from the unit 70. A watchdog timer checks if the times- 
tamp register is running and instructs the supervision 
unit 71 (see t>etow) to place the relays 65A, 65B In pass- 
thru (bypass) mode if no clock is found. 

Lookup candidate seiection unit 75 This unit has 
ISUP protocol knowledge to allow it to detect particular 
message types (notably, but without limitation, lAMs) 
and to extract the parameter values of interest (notably, 
but without limitation, called party numbers). The unit 75 
will initiate a lookup in the database 66 (Figure 13) 
against the extracted parameter value as soon as the 
latter is available. Lookups can be distributed between 
servers e.g. by using the first digit of a local number to 
decide which server to use. Fault tolerant lockups are 
also feasible by effecting multicast lookup to primary 
and secondary servers. Lookups may be transmitted via 
a LAN to a server or may be directed to a cache on board 
the interceptor Only messages tagged as good are ex- 
amined by the unit 75, those tagged as bad being 
passed through the interceptor unchanged. 

Substitute lookup responses Unit 76 This unit ef- 
fects any required modification to a message, either by 
changing particular parameter values or by changing 



the destinatbn point code of the message. If the 
changed parameter Is a variable length one (or indeed, 
if optional parameters are added) then the change may 
cause the message frame length to Increase. It is the 

s responsibility of the unit 76 to make any required adjust- 
ments to the length indicators and to the messages' in- 
ternal pointers. 

Bandwidth balance Unit 78 This unit checks if the 
timestamp of the frame at the head of the delay pipe 73 

10 was received at a time inten^al Tp^^ (the pipe delay 
constant) before the time currently shown in the times- 
tamp register. Let us call this difference T^fi^. The unit 78 
endeavours to keep the delay through the interceptor as 
constant as possible to prevent excessive jittering of the 

IS link throughput which could make queuing delays at the 
STP erratic and subsequent modelling difficult. The unit 
78 operates according to the following rules: 



- if the difference is equal to or slightly greater than 
'''pmsu ^^^^ frame is passed to the transmit unit 
74; 

- rf the difference is significantly larger than Jp^su 
then the delay pipe has grown owing to an increase 
in length of the preceding frame which in turn was 

2S caused by a lookup substitution. Several strategies 
are available to recover barKlwidth and these are 
applied in the following order 

1. Use gaps between frames: if the time dif- 
30 ference between the timestamps of the first and 

second messages (frames) in the queue is 
greater than the time it would take to transmit 
the first message in the queue, then the first 
message is passed to the transmit chain. The 
3S net effect on the link is a delay in receiving the 

message equal to the time it took to transmit 
the octets added to the previous message. 

2. Delete a FISU: if there Is a FISU at the head 
of the queue then it can be deleted without be- 

40 ing transmitted, without affecting L3 data flow, 

because all the folbwing conditions hold: 

(a) FISUs dont transfer L3 data; 

(b) the FSN information is only signlfk:ant 
4S for MSUs; 

(c) the FIB indication is only significant for 
MSUs; 

(d) the BSN acknowledgement Is caught by 
the BSN of the next frame; 

so (e) the BIB indication is replicated in the 

BIB of the next frame; and 
(f) a frame must be following (thus guaran- 
teeing (d) and (e)), because strategy 1 
above failed. 

55 

3. Delete FiSU and shift back: if an FISU can 

be found in the queue then it can be deleted 
according to the procedure above. The times- 
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tamps of all frames which precede the deleted 
FISU should be incremented by the time it 
would take to transmit the FISU. 
4. Delete an MSU: by deleting an MSU at the 
head of the queue, bandwidth for the preceding 
frame will be allocated. The MTP flow control 
procedure at the STP side of the message in- 
terceptor will then detect a missing sequence 
number and request re-transmission. 

Supervision unit 71 This unit monitors both the in- 
coming and outgoing streams and if any of the situations 
listed below occurs then the relays 65A, 65B are re- 
turned to pass-thru mode: 

1 . Error conditions are not passed through 

2. Frames experience a delay significantly less than 
or greater than Tp^^^ 

3. A sequence of two or more frames arriving on the 
incoming stream has two or more frames deleted 
on the outgoing stream 

4. An ISUP message encoding rule has been bro- 
ken on the traffic on the outgoing stream 

5. An excessive number of re-transmitted frames is 
received on the incoming stream. (This may be due 
to a hardware failure in the transmitter so the unit 
should be taken out of service as a precautionary 
measure). 

)t will be appreciated that the part of the message 
interceptor responsible for message input and output, 
the delay pipe, sen/ice trigger checking, and message 
modification, can be replicated and arranged in parallel 
to provide protection of the link during board swaps etc. 
The message modification portion of the interceptor 
may be replicated by itself with the replicated portions 
being arranged In parallel to increase modification 
throughput. 

The message interceptor 60 is described in further 
detail in our copending UK patent application no. 96 15 

998.3. 

Variants 

It will be appreciated that many variants are possi- 
ble to the above described embodiments. Thus, for ex- 
ample, rather than intercepting the signalling messages 
as they pass along a link, they could equally be inter- 
cepted as they pass through an STP; the mechanisms 
involved in intercepting messages at an STP are very 
similar to those described in EP-A-0 669 771 . 

It will further be appreciated that although the 
present invention has been described above in relation 
to implementation of number portability and call inter- 
cept services, the above-described inventive concepts 
can be applied to the implementation of other services 
that can be triggered off the detection of circuit-related 
or other signalling messages. In particular, the message 



interceptor described with reference to Figures 1 3 to 1 5 
can be used to implement many different services. Fur- 
thermore, the generation and loopback of a release 
message by the message interceptor on the basis of 

s particular selection criteria being satisfied, can be ap- 
plied to other services additional to LNP; in such cases, 
the retumed message need not be restricted to a re- 
lease message but could be any type appropriate to the 
applicatk)n concerned. 

10 Although the above descr^tbn relates to an SS7 
signalling network. It will be appreciated that the mes- 
sage interceptor and the method of the invention could 
be arranged to operate with other, similar, signalling net- 
works. In particular, it is possible to vary the physcal 

IS and link levels from those generally specified for an SS7 
network. Thus the message interceptor and method of 
the invention may be applied to a signalling network in 
which the basic link transport mechanism is based on 
ATM technology, the higher levels still being SS7 con- 

20 formant. 



Claims 

A method of providing a service in respect of a call 
in a switched telecommunications system that com- 
prises a bearer network (12) with a plurality of 
switching points (SSP) for setting up calls through 
the bearer network, and a signalling system with a 
plurality of links (18) by means which circuit-re- 
lated control messages can be passed between the 
switching points for regulating call setup and re- 
lease; said method comprising the steps of: 

(a) - intercepting (60) said circuit-related control 

messages, 

(b) - for each intercepted control message, ac- 
cessing sen/ice trigger data to ascertain wheth- 
er servk:e implementation action is required in 
respect of the call associated with the control 
message, 

(c) - where step (b) indicates that service im- 
plementation action is required, modifying the 
corresponding control message, and 

(d) - forwarding on the intercepted control mes- 
sages over the signalling network. 

A method according to claim 1 , wherein said control 
messages comprise control-message destination 
data and call-related parameters, step (c) involving 
modifying at least one said parameter of said con- 
trol message whereby to effect at least part of the 
required service implementation action, the said 
destination data of the control message being left 
unmodified. 

3. A method according to claim 1 . wherein said control 
messages comprise control-message source and 
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destination data and caD-related parameters, step 
(c) involving: 

— modifying at least one said parameter of said 
control message whereby to effect at least part 
of the required sen/ice implementation action, 
and 

— replacing said destination data of the control 
message with said source data; 

the originating switching point taking further sendee 
implementation action based on the modified said 
at least one parameter upon receipt back of said 
control message. 

4. A method according to claim 3, wherein each said 
control message further comprise a message type 
indicator, step (c) further involvirig rrxxiifying sakJ 
message type indicator. 

5. A method according to claim 1 , wherein saki control 
messages comprise control-message destination 
data and call-related parameters, step (c) involving 
modifying the said destination data of the control 
message to route it to a service control function, the 
said call-related parameters of the control message 
being left unmodified. 

6. A method according to claim 5, wherein step (c) fur- 
ther involves storing at least a part of the control 
message for lookup by said service control function, 
the stored said at least a part of the control message 
including the unmodified destination data whereby 
to enable said service control function to ascertain 
the original destination of the control message. 

7. Amethodaccordingtoclaimi, wherein said control 
messages are of various types and comprise a mes- 
sage-type indicator, control-message source and 
destination data, and call-related parameters; said 
service trigger data indicating for which control- 
message types and parameter values service im- 
plementation action is required. 

8. A method according to claim 7.. wherein one said 
message type is an initial Address message includ- 
ing a called-number parameter holding called 
number data, saki service trigger data indicating 
that service implementation action is required for 
control messages of said Initial Address type that 
have particular values of said called-number pa- 
rameter. 

9. A method according to claim 8, wherein the service 
to be provided is local number portability, step (b) 
Involving comparing the type and called number da- 
ta of each intercepted control message with the 
service trigger data to ascertain whether said local 



number portability sen^e Is to be implemented. 

10. A method according to claim 9, wherein where step 
(b) indicates that said local number portability serv- 

5 ice is to be providM in respect of a called number, 
said accessing of said sen/ice trigger data in step 
(b) returns a kx:ation routing number indicative of 
the switching point from which the called party cur- 
rently depends, step (c) involving: 

TO 

— setting the called number data ri the control 
message to said location routing number, 
storing the original called number in the control 
message, and 

75 ... setting a flag in the control message to hdicate 
that the called number data is a location routing 
number. 

11. A method according to claim 9, wherein where step 

20 (b) indicates that said local number portability serv- ^ 
ice is to be provided In respect of a called number. 
said accessing of said sen/ice trigger data in step 
(b) returns a location routing number indicative of 
the switching point from which the called party cur- 

2S rently depends, step (c) involving: 

— storing the location routing number in the con- 
trol message; 

— setting the message type indicator to a release 
30 message type; and 

— swapping the source and destinatbn data; 

said method further involving, for each control mes- 
sage received back at the originating switching 

35 point as a release message folbwing modification 
in step (c), sending out a new control message of 
the Initial Address Message type with its said des- 
tination data set in dependence on said k)cation 
routing number, said new control message having 

^ its called number data set to said location routing 
number and including both the original called 
number and a flag indicating that the called number 
data Is a location routing number. 

45 12. A method according to claim 9, wherein where (b) 
indicates that said local number portability service 
is to be provided, step (c) involves: 

— modifying the said destination data of the said 
corresponding control message to route it to a 
sen/ice control function, and 

— storing at least a part of the control message 
including the unmodified destination data; 

55 said method including the following further steps for 
each control message received at said service con- 
trol function following modification of its destination 
data in step (c): 
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sage whereby to enable said service control 
function to ascertain said unmodified destina- 
tion data of the control message; 
- changing the control message by setting the 

s called number data in the control message to 

an IP number indicative of an intelligent periph- 
eral to which the call is to be routed, and setting 
the destination data to said unnrKxiified desti- 
nation data, and 

10 ~ sending on the changed control message. 

1 6. A method according to claim 1 4 or 1 5, wherein said 
sen^ice trigger data indicates that service imple- 
mentation action is required for control messages 

IS of said Initial Address type that have particular val- 
ues of said called party number. 

17. A method according to claim 1 4 or 1 5, wherein said 
party-rHjmber data of said initial Address messages 

20 include calling number data, said service trigger da- 
ta indicating that service implementation action is 
required for control messages of said Initial Address 
type that have particular values of said calling party 
number. 

2S 

1 8. A method according to claim 1 4 or 1 5, wherein said 
call interception sen/ice further involves providing 
for the tapping of the corresponding call at said in- 
telligent peripheral and seeking to complete the call 

30 from the intelligent peripheral to the called party. 

19. A method according to claim 14orclaim 15. wherein 
said call interception service further involves play- 
ing a voice message to the calling party from said 

35 intelligent peripheral without completing the call to 
the called party. 

20. A method according to any one of the preceding 
claims, wherein the control message interception in 

40 step (a) is effected in a said link. 



- looking up from said service control function the 
stored said at least a part of the control mes- 
sage whereby to enable said sen/ice control 
function to ascertain said unmodified destina- 
tk>n data of the control message; 

- changing the control message by: 

— setting the called number data in the con- 
trol message to said location routing 
number, 

— storing the original called number in the 
control message. 

— setting a flag in the control message to in- 
dicate that the called number data is a lo- 
cation routing number, and 

— setting the destination data to said unmodi- 
fied destinatbn data, and 

- sending on the changed control message. 

13. A method according to claim 7, wherein one said 
message type is an Initial Address message includ- 
ing party-number data comprising at least called 
number data, and wherein the service to be provid- 
ed is call Interception; said service trigger data in- 
dicating that service implementation action Is re- 
quired for control messages of said Initial Address 
type that have particular values for at least part of 
said party-number data, and step (b) involving com- 
paring the type and party-number data of each in- 
tercepted control message with the service trigger 
data to ascertain whether sakJ call interception 
service is to be implemented. 

14. A method according to claim 13, wherein where 
step (b) indicates that said call interception sen/ice 
is to be provided, step (c) involves setting the called 
number data in the control message to an IP 
number indicative of an intelligent peripheral to 
which the call is to be routed. 

15. A method according to claim 13. wherein where 
step (b) indicates that said call interception sen^ice 
is to be provided, step (c) involves: 

« nrxxiifying the said destination data of the said 
corresponding control message to route it to a 
service control function, and 

- storing at least a part of the control message 
including the unmodified destination data; 

said method including the following further steps for 
each control message received at said service con- 
trol function following modification of its destination 
data in step (c): 

- looking up from said sen/ice control function the 
stored said at least a part of the control mes- 



21 . A method according to claim 20, wherein the pass- 
ing of said control messages over each said link is 
effected in accordance with a link-level protocol 

4S having state, steps (a) and (d) being effected with- 
out affecting the current state of the link-level pro- 
tocol on the link concerned. 

22. A method according to claim 20, wherein the pass- 
so ing of said control messages over each said link is 

effected in accordance with a link-level protocol 
having state, steps (a) and (d) being effected by set- 
ting up independent link-level protocol exchanges 
with each end of the link concerned whereby in step 
55 (a) said control messages are intercepted by recep- 
tion from one end of the link in accordance with the 
link-level protocol operated therewith, and in step 
(d) the control messages are forwarded by trans- 
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mission to the other end of the link in accordance 
with the link-level protocol operated therewith. 

23. A method according to any one of claims 1 to 19, 
wherein the control message interception in step (a) s 
is effected at a signalling transfer point. 

24. A message interceptor for intercepting and modify- 
ing messages passing over a signalling link accord- 
ing to a link-level protocol operated between the link to 
end points, said message interceptor effecting its 
operation without providing a link-level termination. 
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